Microsoft vulnerabilities
We track 1,120 vulnerabilities in Microsoft products across 60+ products. 1,077 are rated high or critical, and 406 have been exploited in real attacks. The most recent was published on November 10, 2026.
Latest Microsoft vulnerabilities
- 8.8 High severity
Google Chromium V8 Out-of-Bounds Read and Write Exploited
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- 8.8 High severity
Microsoft Edge (Chromium-based) Updater: Improper Link Resolution Before File Access
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
- 8.0 High severity
.NET 8.0: External Control of File Name or Path
External control of file name or path in .NET, Visual Studio, and Build Tools for Visual Studio allows an authorized attacker to perform spoofing over a network.
- 7.8 High severity
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Exploited
Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Exploited
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Visual Studio 2019 version 16.11…: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an unauthorized attacker to execute code locally.
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows DWM Core Library Use-After-Free Exploited
Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
- 7.5 High severity
Microsoft Windows Scripting Engine Type Confusion Exploited
Access of resource using incompatible type ('type confusion') in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
- 9.8 Critical severity
Azure AI Document Intelligence Studio: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure allows an unauthorized attacker to elevate privileges over a network.
- 7.0 High severity
Windows 10 Version 21H2: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Universal Print Management Service allows an authorized attacker to elevate privileges locally.
- 8.8 High severity
Microsoft Dataverse: Improper Handling of Exceptional Conditions
Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.
- 7.3 High severity
SQL Server Management Studio 20.2: Uncontrolled Search Path Element
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Exploited
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
- 7.5 High severity
Microsoft Outlook for Android: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Outlook for Android allows an unauthorized attacker to disclose information over a network.
- 7.0 High severity
Windows 11 version 22H2: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
- 7.5 High severity
Windows Server 2012 R2: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows Server 2012 R2: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows 10 Version 1507: Sensitive Data Storage in Improperly Locked Memory
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges over a network.
- 7.5 High severity
Windows Server 2012 R2: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows Server 2012 R2: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows 10 Version 1507: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to deny service over a network.
- 7.5 High severity
Windows Server 2012 R2: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 7.0 High severity
Windows 11 version 22H2: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Secure Channel allows an authorized attacker to elevate privileges locally.
- 7.0 High severity
Windows 10 Version 1507: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
- 7.5 High severity
Windows Server 2012 R2: Uncontrolled Resource Consumption
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
- 8.8 High severity
Microsoft Edge (Chromium-based): Access of Resource Using Incompatible Type
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- 8.8 High severity
Azure Health Bot: Server-Side Request Forgery
An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
- 7.8 High severity
Microsoft Edge Update Setup: Improper Link Resolution Before File Access
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
- 7.0 High severity
Microsoft Windows Management Console (MMC) Improper Neutralization Exploited
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
- 7.0 High severity
Azure ARC: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Azure Arc allows an authorized attacker to elevate privileges locally.
- 7.8 High severity
Microsoft Windows NTFS Heap-Based Buffer Overflow Exploited
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
- 5.5 Medium severity
Microsoft Windows NTFS Out-Of-Bounds Read Exploited
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
- 7.8 High severity
Microsoft Windows Fast FAT File System Driver Integer Overflow Exploited
Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally.
- 4.6 Medium severity
Microsoft Windows NTFS Information Disclosure Exploited
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
- 7.0 High severity
Microsoft Windows Win32k Use-After-Free Exploited
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
- 5.4 Medium severity
Microsoft Windows NTLM Hash Disclosure Spoofing Exploited
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
- 8.4 High severity
Azure CLI: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.
- 9.8 Critical severity
Microsoft Power Pages Improper Access Control Exploited
An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected cust